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Method for diagnosing an assembly of 
electronic systems 

The present invention relates to a method for diagnosing an 
assembly of electronic systems containing components (A n i; C n i; UCE n ; 
B) that produce and consume data, at least one of the said data (xi) 
being able to assume a predetermined particular value (x ip ) following 
the development of a functional fault of at least one of the 
components (A n i; C n i; UCE n ; B) of the said assembly. 

There are known assemblies of electronic systems of this type, 
designed in particular as equipment for motor vehicles. Such a 
vehicle is commonly provided with a plurality of systems, each 
ensuring the execution of a service such as control of the engine 
that powers the vehicle, the management of the passenger- compartment 
air conditioning, the management of the interactions of the vehicle 
with the ground (such as brakes, suspension) and the management of 
telephone communications . 

The hardware components of the assembly of such systems, for a 
vehicle, for example, are illustrated schematically in Fig. 1 of the 
attached drawing. These components comprise substantially electronic 
control units or "calculators" UCE m , each calculator being connected 
if necessary to sensors C n i and to actuators A m j , all calculators 
being connected to at least one and the same bus B, on which they 
can send or receive information streams, which may be multiplexed, 
for example, originating from or destined for other calculators 
connected to bus B. 

This multiplexing is achieved in particular, as is well known 
for the CAN bus, for example, by introducing the information streams 
in question into messages having the form of digital signal frames. 

As an illustrative example, n engine control' 7 system S 2 
comprises calculator UCE 2 , a plurality of sensors C 2 ± sensitive to 
variables such as the speed of the engine, an internal combustion 
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engine, for example, the pressure at the intake manifold of this 
engine, the outside air pressure, the temperature of the engine- 
cooling water, the air temperature, the battery charge level, and a 
plurality of actuators A 2 j . Calculator UCE 2 is duly programmed to 
execute a plurality of engine -control functions such as: regulation 
of idling speed, regulation of the richness of the air/fuel mixture, 
adjustment of the ignition advance of this mixture and recirculation 
of the exhaust gases. To accomplish this, calculator UCE 2 exploits 
the information streams arriving from the aforesaid sensors C 2 ± and 
creates control signals for actuators A 2 j , composed of an additional 
air control valve and a spark-plug ignition coil for the idling- 
speed regulation" function, a fuel injector for the "richness 
regulator" function, the same ignition coil for the "ignition 
advance" function and a valve for the "recirculation of exhaust 
gases" function. 

The other "services" cited in the foregoing, such as 
"passenger- compartment air conditioning" and "interaction with the 
ground" are executed by architecture systems analogous to that 
presented in the foregoing for engine control . 

All these systems communicating on one and the same bus B 
comprise a multiplexed network. It is therefore conceivable that a 
plurality of functions associated with different systems can exploit 
information streams originating from the same sensors, for example, 
which avoids costly redundancies in the structure of the assembly of 
systems. The use of a multiplexed network also permits a very 
significant reduction in the length of the electric lines 
interconnecting the different elements of the assembly. Such a 
multiplexed assembly also permits the mapping of non-traditional and 
possibly complex functions, sometimes involving a plurality of 
systems and for this reason being known as "cross-functional". As an 
illustrative and non- limitative example, the detection of an "airbag 
deployed" information stream, meaning that the vehicle has suffered 
a collision, can then be processed in such a way that an emergency 
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call is sent out by a mobile telephone device on board the vehicle. 

From French Patent Application No. 01-15819 there is known the 
notion of particular value and the use thereof in a method for 
diagnosing functional faults of an assembly of electronic systems. 

However, this method does not permit selection of a type of 
malfunction for the diagnosis. For example, it is not possible to 
search solely for malfunctions originating from the connection 
system, for example, or to search for the malfunctions that are 
primarily the most, probable, since this probability is based on 
knowledge of the design techniques employed. 

To remedy these shortcomings, the present invention relates to 
a method for diagnosing functional faults of an assembly of 
electronic systems, the said systems being composed of components 
(A n i; C n i; UCE n ; B) that produce and consume data, at least one of the 
said data (xj being able to assume a predetermined particular value 
(x ip ) , such as, for example, a fault indication stored in a memory of 
a calculator, following the development of a functional fault of at 
least one of the components (A n i; C n i; UCE n ; B) of the said assembly, 
this method being characterized in that: 

i) during a phase of design of the architecture of the said 
assembly of systems, the particular values are classified (a) 
according to the associated types of faults, and the said 
classification is recorded in a computer memory, for example in the 
form of a lookup table; 



WO 2004/059519 



4 



PCT7FR2003/003850 



ii) during a diagnostic phase, a diagnostic tool is connected 
to the said assembly of electronic systems, the said tool having 
access to the said classification; 

iii) the particular values corresponding to types of faults of 
components predefined in the said classification as particularly 
reliable are suppressed (b) ; 

iv) the data (x ± ) that have assumed a particular value (x ip ) are 
selected (c) ; 

v) for each datum (xj selected in step (iv) , there is 
automatically calculated (d) a group (XoOi) of data capable of being 
responsible for the particular values (x ip ) assumed by the datum 

(Xi) / 

vi) there is automatically established (e) a list (Xoo) of the 
data contained in the intersection of the said groups (XoOi) of data, 
and 

vii) the particular values and their propagation are recorded 
on a memory means for a tool provided for the diagnosis of the said 
assembly of electronic systems. 

By virtue of this method, it is possible to search for actual 
or potential malfunctions according to their type, which makes it 
possible to shorten the malfunction-search time by considering only 
the most probable malfunctions. It will be understood that the term 
electronic system covers all electronic and electrical systems that 
produce and consume data . 

The faults for which consequences have not been observed can 
be excluded (g) from the said list (Xoo) . 

This makes it possible to shorten the malfunction-search time. 

If no fault remains in step (vi) , it is possible to restart at 
step (ii) , by taking into account (j) classes of fault that had been 
removed previously. 
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If a fault remains in step (vi) , it is possible to verify that 
one of the faults identified in phase (g) is indeed the cause of the 
problem that led to initiation of the said diagnostic phase and, if 
such is not the case, step h) is recommenced. 

It is possible to analyze the said list (Xoo) to identify that 
component or those components of the assembly in which a functional 
fault is responsible for the particular values (x ip ) assumed by the 
said data (xi) . 

Fault types may belong to at least one of the categories 
listed below: 

the values created following the unavailability of a 
datum emitted by a function, 

- the particular values created following the detection of 
a fault of a sensor or actuator, 

the particular values created following a fault of the 
connection system, at the level of a connector or wire, 

the particular values created following a fault of a 
calculator, 

the particular values created following a fault of 
execution of a program on a microcontroller, and 

the particular values created following a fault at the 
level of a communication network. 
There can be automatically determined a probability that each 
datum will assume a particular value as a function of the category 
to which it belongs, and step (b) is modified by first taking step 
(j) into account. 

By virtue of these arrangements, a malfunction search can be 
oriented by first taking the most probable malfunctions into 
account . 
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The said assembly of electronic systems can be composed of an 
assembly of systems for equipping a vehicle. 

The method can include a step of analysis of the feasibility 
and/or susceptibility to failure of the said assembly of electronic 
systems and of the establishment of an output indicating the said 
feasibility and/or susceptibility to failure. 

The present invention also provides a commercial article 
comprising a computer-readable memory, a program executable by a 
computer being recorded in the said memory for the diagnosis of 
functional faults of an assembly of electronic systems, 
characterized in that the said program includes encoding for: 

i) classifying (a) , during "a phase of design of the 
architecture of the said assembly of systems, the particular 
values according to the associated types of faults, and the 
said classification is recorded in a computer memory, for 
example in the form of a lookup table; 

ii) connecting, during a diagnostic phase, a diagnostic 
tool to the said assembly of electronic systems, the said 
tool having access to the said classification; 

iii) suppressing (b) the particular values corresponding 
to types of faults of components predefined in the said 
classification as particularly reliable; 

iv) selecting (c) the data (x ± ) that have assumed a 
particular value (x ip ) ; 

v) automatically calculating (d) , for each datum (x ± ) 
selected in step (iv) , a group (XooJ of data capable of 
being responsible for the particular values (x ip ) assumed by 
the datum (xi) ; 

vi) automatically establishing (e) a list (X<x>) of the 
data contained in the intersection of the said groups (XoOi) 
of data, and 

vii) recording the particular values and their 
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propagation on a memory means for a tool provided for the 
diagnosis of the said assembly of electronic systems. 
The present invention also provides a data-processing tool 
programmed for the diagnosis of an assembly of electronic systems 
using the steps of the method of the present invention or programmed 
by using a commercial article of the present invention. 

The said assembly of electronic systems can comprise an 
assembly of systems for equipping a motor vehicle. 

Other objectives, characteristics and advantages of the 
present invention will become apparent by way of example by reading 
the description provided hereinafter and by examining the attached 
drawing, wherein: 

Fig. 1 is a schematic diagram of an assembly of 
electronic systems that is intended to be equipped with 
means for diagnosing functional faults according to the 
present invention, this assembly being described in the 
preamble of the present description, and 

Fig. 2 is a flow diagram describing the application 
of the invention in a method for diagnosing malfunctions 
of an electronic system. 
The particular values of the data produced by the components 
of an assembly of systems can be placed in categories, especially 
during the design phase, as a function of the types of faults that 
they manifest. 

A distinction can be made between the functional particular 
values, which are related to the sensors, actuators and functions, 
and the operational particular values, which result from a 
particular embodiment of functions by the calculators, the data 
buses, the hard-wired links and the connectors. 

Among the functional particular values, for an input -data flow 
of a function, there are recognized different categories of 
particular values, especially those that determine an invalid value 
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of a datum and those that determine a value outside the definition 
range of the datum fixed by the designer. 

Among the functional particular values, there also are 
recognized the particular values created following the fault of a 
sensor or actuator, the detection of the fault typically being 
achieved by a function that drives the sensor or the actuator. 

Among the operational particular values, or in other words 
those originating from a particular implementation of functions by 
the calculators, the communication buses between the calculators and 
a cabling system, there are recognized especially: 

the particular values that diagnose a fault on a 
hard-wired link, especially short circuits to ground and 
open circuits; 

the particular values that relate to detection of a 
communication fault on a multiplexed bus, originating in 
particular from an absent data frame; 

the particular values relating to the absence of a 
calculator from a network; there then can be recognized 
the particular values produced within the isolated 
calculator and the particular values produced by 
calculators that observe the isolated calculator. This 
category of particular values is produced, for example, 
when data frames of the said network are absent, or in 
other words when they are expected and not received; 

the particular values relating to a fault of 
execution on a calculator, when it relates, for example, 
to a memory corruption, or in other words an accidental 
inversion of at least one bit in memory, detected by a 
CRC (Cyclic Redundancy Check) of reinitialization of the 
said calculator following the detection of an anomaly by 
a program resident on the said calculator; 



WO 2004/059519 PCT7FR2003/003850 

9 

the particular values relating to a supply fault; 

and 

the particular values that characterize a 
combination of faults. 
From French Patent Application No. 01-15819, filed by the 
Applicant and incorporated here by reference, there is known a 
method for diagnosing functional faults of an assembly of electronic 
systems that produce and consume data, at least one of the said data 
(x ± ) being able to assume a predetermined particular value (x ip ) 
following the development of a functional fault of at least one of 
the components of the said assembly, this method comprising the 
following steps : 

a) at the initiation of a diagnostic phase, there are 
selected the data (x ± ) that have a particular value (x ip ) , 

b) for each datum (x t ) selected in this way, there is 
searched the group (Xoo ± ) of data capable of being responsible for 
the particular value (x ip ) assumed by the datum (xj ; 

c) there is established the list (Xoo) of data belonging to the 
intersection of the said groups (XoOi) of data, and 

d) the said list (Xoo) is analyzed to identify that component 
or those components of the assembly in which a functional fault is 
responsible for the particular values (x ip ) assumed by the said data 
(xt) . 
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By implementing the present invention, the method summarized 
above is refined to take into account the categories of particular 
values of the present invention. A particular embodiment of this 
refined method will be described in detail with reference to Fig. 2. 
It contains the following steps: 

- an initialization step 210 of known type, 

- a step a) 215 at the initiation of a diagnostic phase, in the 
course of which there are selected the data (x ± ) that have a 
particular value (x ip ) ; 

- in the course of a step b) 220, there are excluded from this list 
the data forming part of categories judged to be more certain by the 
person skilled in the art; for example, only the particular values 
relating to faults of the connecting system are considered at first, 
or, if the searches have not yielded anything at this point, 
particular values of previously excluded categories are added; 

- in the course of a step c) 225, there is selected each datum (x ± ) 
that has a particular value (x ip ) ; 

- in the course of a step d) 23 0, given the datum (xi) selected in 
this way in step a) , a search is conducted for the group (XoOi) of 
data capable of being responsible for the particular value (x ip ) 
assumed by the datum (x^) ; 

- in the course of a step e) 235, there is established the list (Xoo) 
of data belonging to the intersection of the said groups (X^) of 
data; 

- in the course of a step f) 240, there is analyzed the said list 
(Xoo) to identify that component or those components of the assembly 
in which a functional fault is responsible for the particular values 
(x ip ) assumed by the said data (xi) ; 

- in the course of a step g) 245, given the faults envisioned in 
step f) 240, there are excluded all the particular values 
corresponding to faults that have not been observed in the system, 
whether this has been established by the person skilled in the art 
after precise verification or by observation of the functioning of 
certain components. For example, a supply wire of a light cannot be 
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in short-circuit if it is possible to turn the light on and off. 
Consequently, if a particular value characterizing the said short 
circuit was envisioned, it can be excluded. 

- a step j) 255, in the course of which, for the case that no 
particular value remains to be examined after step g) 245, that may 
mean that too many possibilities were excluded at the beginning of 
the analysis, and the method is reiterated starting from step c) 
225, but retaining the categories of particular values excluded from 
the analysis up to that point; 

- a step h) 250, in the course of which there are examined the 
results of step g) 245 and, after examination, if a fault cannot be 
identified on the basis of the envisioned faults, the method is 
recommenced at step c) 225, while extending the search perimeter to 
new categories of particular values in the course of step j) 255. 

If, for each category, there are considered probabilities of 
occurrence derived from empirical measurements, for example, 
probabilities of occurrence can be assigned to the different 
particular values. When a particular value covers several faults 
that may originate from different categories, it inherits the sum of 
the probabilities of occurrence of each of the faults. 

The method described in the foregoing is then recommenced as a 
function of the probabilities of occurrence of the different 
categories of particular values. For example, first the most 
probable elements are added to the list, then if step b) is 
reproduced, elements slightly less probable are added to the list, 
and so on until there remains at least one particular value at the 
end of step h) and/or until the cause of the fault that necessitated 
the diagnosis is detected. 

The assembly of electronic systems can contain an assembly of 
systems for equipping a motor vehicle. The method of the invention 
can include a step of analysis of the feasibility and/or 
susceptibility to failure of the said assembly of electronic systems 
and a step of the establishment of an output indicating the said 
feasibility and/or susceptibility to failure. This can aid in the 
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acceptance or rejection of an assembly of systems, such as one 
proposed for a vehicle. 

This method can be implemented by means of a data-processing 
tool making it possible to edit the different objects necessary to 
the design and partial automation of the different steps of the 
method established by the invention. 

The method of the invention can be programmed on a commercial 
article provided with a computer-readable memory, such as a CD, DVD 
or equivalent, or on the hard disk of a computer. Such a program for 
the method will be executable by a computer and will be recorded on 
the said memory for execution by the said computer. 



